Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39362e302f32342d3234203d3e20313437303439.roa
File: 3139342e3233332e39362e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: 1ILKfq0BADaj1OXyKh5n4vcApHWr8RXKNNT7ov/xblM=
Subject key identifier: 71:F0:A2:F5:83:41:8A:4C:C1:EE:BE:FA:B1:A5:2E:F4:FD:FD:1E:16
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 52B62BC4F45A2965B6C0D078E8FE7D73DCAE8413
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39362e302f32342d3234203d3e20313437303439.roa
Signing time: Mon 27 Jan 2025 09:45:05 +0000
ROA not before: Mon 27 Jan 2025 09:40:05 +0000
ROA not after: Mon 26 Jan 2026 09:45:05 +0000
asID: 147049
IP address blocks: 194.233.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:b6:2b:c4:f4:5a:29:65:b6:c0:d0:78:e8:fe:7d:73:dc:ae:84:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:05 2025 GMT
Not After : Jan 26 09:45:05 2026 GMT
Subject: CN=71F0A2F583418A4CC1EEBEFAB1A52EF4FDFD1E16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:e6:bb:68:2e:53:bf:d1:3e:17:7a:15:1c:84:
5e:f0:ab:6e:7c:04:86:5e:ff:b2:fd:c1:4d:43:34:
da:3e:dc:f7:11:95:3b:26:39:c5:b4:5d:45:7c:7e:
4c:1f:5d:30:b3:98:c3:43:38:de:55:8c:72:c0:82:
85:fe:0a:57:0f:07:e3:69:35:68:63:f6:f6:33:b3:
bf:2a:ee:45:f9:d8:00:dc:af:45:48:66:ec:4a:56:
de:b5:56:69:06:e0:eb:7c:99:18:96:1b:ec:41:e8:
e9:81:5e:77:c2:ff:83:9b:83:7a:17:a8:7e:7f:b6:
7f:06:74:66:55:07:2a:41:33:26:18:3d:82:49:ef:
43:81:a6:c1:89:e0:1c:a1:4b:f0:10:af:35:a2:e2:
89:67:38:ee:61:5f:ef:af:d9:c4:d7:ec:4f:d1:ef:
14:b8:26:66:80:05:d5:12:3b:fa:53:40:70:8b:59:
69:79:ef:dd:e8:df:50:de:5a:55:01:cb:31:85:6b:
a8:6f:a5:38:50:14:de:89:a3:49:4b:c7:32:82:d6:
95:d0:bf:5f:de:1e:c9:89:84:2e:bd:94:16:df:46:
b5:dc:25:96:47:a0:17:92:62:29:dd:af:f4:ca:b1:
39:f3:7e:ce:d1:84:cb:59:7d:57:e2:e1:05:30:5a:
a7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F0:A2:F5:83:41:8A:4C:C1:EE:BE:FA:B1:A5:2E:F4:FD:FD:1E:16
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39362e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.96.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:31:8e:08:71:f5:66:3c:66:18:0d:02:30:4f:1d:af:02:c2:
f7:58:8f:19:cf:7d:63:58:da:5d:7f:15:da:e3:3e:52:f4:ac:
d7:90:fe:99:8d:38:e5:72:0b:01:3b:90:39:dd:80:f9:7f:b3:
8b:75:67:3c:95:8e:33:7e:d0:db:9f:3d:89:fd:02:9b:1b:38:
f1:f7:30:09:2b:16:25:e5:d6:0d:2b:e5:b4:00:61:e5:25:44:
1b:be:ab:1d:2b:a7:ba:6d:df:79:d6:25:f9:b1:d8:b9:d4:11:
1e:7b:69:b1:40:f1:92:80:1a:55:08:e5:b9:f6:26:ef:c2:09:
8a:3b:46:33:fd:19:0b:53:19:0a:32:98:ab:b6:d6:e7:f9:75:
c1:51:71:3d:0b:10:0e:39:e0:53:44:b4:2e:36:d7:62:72:84:
de:35:65:00:ce:68:59:ba:a8:58:b4:04:bb:4e:97:4c:03:4b:
74:bc:6a:ca:92:df:fd:2a:7c:9a:72:da:cc:77:d9:54:09:da:
d9:84:f1:aa:8e:2f:6b:3b:15:6b:fe:94:f7:5e:93:73:8a:9e:
d3:f5:f8:5d:78:be:92:c1:eb:f4:0e:32:86:8e:0f:74:c2:a3:
5f:22:e5:df:77:47:3f:1d:a0:90:6d:83:3a:67:44:b1:3e:de:
28:db:58:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:53 2025 by rpki-client